VariantIncomplete

CWE-58Path Equivalence: Windows 8.3 Filename

Category: other

Description

The product contains a protection mechanism that restricts access to a long filename on a Windows operating system, but it does not properly restrict access to the equivalent short "8.3" filename.

Common consequences· 1

  • Confidentiality / Integrity — Read Files or Directories, Modify Files or Directories

Potential mitigations· 1

  • [System Configuration]Disable Windows from supporting 8.3 filenames by editing the Windows registry. Preventing 8.3 filenames will not remove previously generated 8.3 filenames.

References

  1. https://cwe.mitre.org/data/definitions/58.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Improper Resolution of Path Equivalence
CWE
Path Equivalence: 'fakedir/../realdir/filename'
CWE
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE
Path Traversal: '\..\filename'
CWE
Path Traversal: '\dir\..\filename'
CWE
Path Traversal: 'dir\..\..\filename'
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.